Every CVE Search/ Get API key

CVE-2024-1135

HTTP Request Smuggling in benoitc/gunicorn

7.5 HighFix available

Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue is due to Gunicorn's handling of Transfer-Encoding headers, where it incorrectly processes requests with multiple, conflicting Transfer-Encoding headers, treating them as chunked regardless of the final encoding specified. This vulnerability allows for a range of attacks including cache poisoning, session manipulation, and data exposure.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
None

Exploit likelihood

3.00%Up 3.0 points since Apr 16, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.5

HTTP Request Smuggling in benoitc/gunicorn

Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue is due to Gunicorn's handling of Transfer-Encoding headers, where it incorrectly processes requests with multiple, conflicting Transfer-Encoding headers, treating them as chunked regardless of the final encoding specified. This vulnerability allows for a range of attacks including cache poisoning, session manipulation, and data exposure.

Record
CVE-2024-1135
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness
CWE-444
Updated
2026-11-02
EUVDEUVD-2024-1316 7.5

Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue is due to Gunicorn's handling of Transfer-Encoding headers, where it incorrectly processes requests with multiple, conflicting Transfer-Encoding headers, treating them as chunked regardless of the final encoding specified. This vulnerability allows for a range of attacks including cache poisoning, session manipulation, and data exposure.

Record
EUVD-2024-1316
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-w3h3-4rj7-4ph4 8.2

Request smuggling leading to endpoint restriction bypass in Gunicorn

Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue is due to Gunicorn's handling of Transfer-Encoding headers, where it incorrectly processes requests with multiple, conflicting Transfer-Encoding headers, treating them as chunked regardless of the final encoding specified. This vulnerability has been shown to allow access to endpoints restricted by gunicorn. This issue has been addressed in version 22.0.0.

To be affected users must have a network path which does not filter out invalid requests. These users are advised to block access to restricted endpoints via a firewall or other mechanism if they are unable to update.

Record
GHSA-w3h3-4rj7-4ph4
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Weakness
CWE-444
Updated
2026-11-02
NVD 7.5

Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue is due to Gunicorn's handling of Transfer-Encoding headers, where it incorrectly processes requests with multiple, conflicting Transfer-Encoding headers, treating them as chunked regardless of the final encoding specified. This vulnerability allows for a range of attacks including cache poisoning, session manipulation, and data exposure.

Record
CVE-2024-1135
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness
CWE-444
Updated
2026-11-02
OSVDEBIAN-CVE-2024-1135 7.5

Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue is due to Gunicorn's handling of Transfer-Encoding headers, where it incorrectly processes requests with multiple, conflicting Transfer-Encoding headers, treating them as chunked regardless of the final encoding specified. This vulnerability allows for a range of attacks including cache poisoning, session manipulation, and data exposure.

Record
DEBIAN-CVE-2024-1135
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVGHSA-w3h3-4rj7-4ph4 8.2

Request smuggling leading to endpoint restriction bypass in Gunicorn

Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue is due to Gunicorn's handling of Transfer-Encoding headers, where it incorrectly processes requests with multiple, conflicting Transfer-Encoding headers, treating them as chunked regardless of the final encoding specified. This vulnerability has been shown to allow access to endpoints restricted by gunicorn. This issue has been addressed in version 22.0.0.

To be affected users must have a network path which does not filter out invalid requests. These users are advised to block access to restricted endpoints via a firewall or other mechanism if they are unable to update.

Record
GHSA-w3h3-4rj7-4ph4
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Weakness
CWE-444
Updated
2026-11-02
Show 18 moreShow less
OSVOESA-2026-3658 7.5

python-gunicorn security update

Gunicorn(Green Unicorn) is a Python WSGI HTTP Server for UNIX. It's a pre-fork worker model ported from Ruby's Unicorn_ project. The Gunicorn server is broadly compatible with various web frameworks, simply implemented, light on server resource usage, and fairly speedy.

Security Fix(es):

Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue is due to Gunicorn's handling of Transfer-Encoding headers, where it incorrectly processes requests with multiple, conflicting Transfer-Encoding headers, treating them as chunked regardless of the final encoding specified. This vulnerability allows for a range of attacks including cache poisoning, session manipulation, and data exposure.(CVE-2024-1135)

Record
OESA-2026-3658
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVOESA-2026-3659 7.5

python-gunicorn security update

Gunicorn(Green Unicorn) is a Python WSGI HTTP Server for UNIX. It's a pre-fork worker model ported from Ruby's Unicorn_ project. The Gunicorn server is broadly compatible with various web frameworks, simply implemented, light on server resource usage, and fairly speedy.

Security Fix(es):

Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue is due to Gunicorn's handling of Transfer-Encoding headers, where it incorrectly processes requests with multiple, conflicting Transfer-Encoding headers, treating them as chunked regardless of the final encoding specified. This vulnerability allows for a range of attacks including cache poisoning, session manipulation, and data exposure.(CVE-2024-1135)

Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data exposure, session manipulation, SSRF, XSS, DoS, data integrity compromise, security bypass, information leakage, and business logic abuse.(CVE-2024-6827)

Record
OESA-2026-3659
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVPYSEC-2026-1434 8.2

Request smuggling leading to endpoint restriction bypass in Gunicorn

Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue is due to Gunicorn's handling of Transfer-Encoding headers, where it incorrectly processes requests with multiple, conflicting Transfer-Encoding headers, treating them as chunked regardless of the final encoding specified. This vulnerability has been shown to allow access to endpoints restricted by gunicorn. This issue has been addressed in version 22.0.0.

To be affected users must have a network path which does not filter out invalid requests. These users are advised to block access to restricted endpoints via a firewall or other mechanism if they are unable to update.

Record
PYSEC-2026-1434
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Updated
2026-11-02
OSVRHSA-2024:2727 7.5

Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-gunicorn) security update

Record
RHSA-2024:2727
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2024:3781 8.1

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

Record
RHSA-2024:3781
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:4054 7.5

Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (python-gunicorn) security update

Record
RHSA-2024:4054
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2024:7987 7.5

Red Hat Security Advisory: Satellite 6.15.4 Security Update

Record
RHSA-2024:7987
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:1335 7.5

Red Hat Security Advisory: RHUI 4.11 security, bugfix, and enhancement update

Record
RHSA-2025:1335
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVROOT-APP-PYPI-CVE-2024-1135 8.2

CVE-2024-1135 in rootio-gunicorn - Patched by Root

Root has patched CVE-2024-1135 in the rootio-gunicorn package for Root:PyPI. Multiple fixed versions available.

Record
ROOT-APP-PYPI-CVE-2024-1135
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2024-1135 7.5

Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue is due to Gunicorn's handling of Transfer-Encoding headers, where it incorrectly processes requests with multiple, conflicting Transfer-Encoding headers, treating them as chunked regardless of the final encoding specified. This vulnerability allows for a range of attacks including cache poisoning, session manipulation, and data exposure.

Record
UBUNTU-CVE-2024-1135
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVCLSA-2026-1772496719 No score

TuxCare security update for gunicorn (3 CVEs)

TuxCare rebuilt gunicorn to address 3 CVEs. Fixed in 20.1.0.post1+tuxcare.

Record
CLSA-2026-1772496719
Updated
2026-11-02
OSVCLSA-2026-1772496721 No score

TuxCare security update for gunicorn (3 CVEs)

TuxCare rebuilt gunicorn to address 3 CVEs. Fixed in 21.2.0.post2+tuxcare.

Record
CLSA-2026-1772496721
Updated
2026-11-02
OSVCLSA-2026-1787306646 No score

TuxCare security update for gunicorn (1 CVE)

TuxCare rebuilt gunicorn to address 1 CVE. Fixed in 20.0.4.post3+tuxcare.

Record
CLSA-2026-1787306646
Updated
2026-11-02
OSV No score

Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue is due to Gunicorn's handling of Transfer-Encoding headers, where it incorrectly processes requests with multiple, conflicting Transfer-Encoding headers, treating them as chunked regardless of the final encoding specified. This vulnerability allows for a range of attacks including cache poisoning, session manipulation, and data exposure.

Record
CVE-2024-1135
Updated
2026-11-02
OSVMGASA-2024-0236 No score

Updated python-gunicorn packages fix security vulnerability

Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue is due to Gunicorn's handling of Transfer-Encoding headers, where it incorrectly processes requests with multiple, conflicting Transfer-Encoding headers, treating them as chunked regardless of the final encoding specified. This vulnerability allows for a range of attacks including cache poisoning, session manipulation, and data exposure.

Record
MGASA-2024-0236
Updated
2026-11-02
OSVopenSUSE-SU-2024:13891-1 No score

python-gunicorn-doc-22.0.0-1.1 on GA media

These are all security issues fixed in the python-gunicorn-doc-22.0.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13891-1
Updated
2026-11-02
OSVSUSE-SU-2024:1440-1 No score

Security update for python-gunicorn

This update for python-gunicorn fixes the following issues:

  • CVE-2024-1135: Fixed HTTP Request Smuggling (bsc#1222950)
Record
SUSE-SU-2024:1440-1
Updated
2026-11-02
OSVSUSE-SU-2024:2881-1 No score

Security update for python-gunicorn

This update for python-gunicorn fixes the following issues:

  • CVE-2024-1135: Fixed HTTP Request Smuggling due to improperly validate Transfer-Encoding headers (bsc#1222950)
Record
SUSE-SU-2024:2881-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
gunicorn
PyPI
 before 22.0.0
22.0.0
gunicorn
TuxCare:PyPI
From an advisory covering 2 CVEs
 20.1.0 up to 20.1.0.post1+tuxcare
20.1.0.post1+tuxcare
gunicorn
TuxCare:PyPI
From an advisory covering 2 CVEs
 21.2.0 up to 21.2.0.post2+tuxcare
21.2.0.post2+tuxcare
gunicorn
TuxCare:PyPI
 20.0.4 up to 20.0.4.post3+tuxcare, plus listed versions
20.0.4.post1+tuxcare20.0.4.post2+tuxcare
20.0.4.post3+tuxcare
gunicorn
Debian:12
 before 20.1.0-6+deb12u1, plus listed versions
20.1.0-6
20.1.0-6+deb12u1
gunicorn
Debian:13
 before 22.0.0-1
22.0.0-1
gunicorn
Debian:14
 before 22.0.0-1
22.0.0-1
gunicorn
Debian:10
 before 19.9.0-1+deb10u1, plus listed versions
19.9.0-1
19.9.0-1+deb10u1
gunicorn
Debian:11
 before 20.1.0-1+deb11u1, plus listed versions
20.1.0-1
20.1.0-1+deb11u1
gunicorn
PyPI
 before 22.0.0, plus listed versions
0.10.10.00.10.10.11.00.11.1
Show 45 moreShow less
0.11.20.12.00.12.10.12.20.13.00.13.10.13.20.13.30.13.40.14.00.14.10.14.20.14.30.14.40.14.50.14.60.15.00.16.00.16.10.17.00.17.10.17.20.17.30.17.40.20.2.10.30.3.10.3.20.40.4.10.4.20.50.5.10.60.6.10.6.20.6.30.6.40.6.50.6.60.7.00.7.10.7.20.8.0
22.0.0
Show 186 moreShow less
Affected packages
PackageAffectedFixed
python-gunicorn
Mageia:9
 before 22.0.0-1.mga9
22.0.0-1.mga9
python-gunicorn
openEuler:24.03-LTS-SP4
 before 21.2.0-3.oe2403sp4
21.2.0-3.oe2403sp4
python-gunicorn
openEuler:22.03-LTS-SP4
From an advisory covering 2 CVEs
 before 20.1.0-2.oe2203sp4
20.1.0-2.oe2203sp4
python-gunicorn
Red Hat:openstack:17.1::el9
 before 0:20.0.4-7.el9ost
0:20.0.4-7.el9ost
python3-gunicorn
Red Hat:openstack:17.1::el9
 before 0:20.0.4-7.el9ost
0:20.0.4-7.el9ost
automation-controller-venv-tower
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:4.5.7-1.el8ap
0:4.5.7-1.el8ap
automation-controller-venv-tower
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:4.5.7-1.el9ap
0:4.5.7-1.el9ap
receptor
Red Hat:ansible_automation_platform_developer:2.4::el8
From an advisory covering 20 CVEs
 before 0:1.4.8-1.el8ap
0:1.4.8-1.el8ap
receptorctl
Red Hat:ansible_automation_platform_developer:2.4::el8
From an advisory covering 20 CVEs
 before 0:1.4.8-1.el8ap
0:1.4.8-1.el8ap
receptor
Red Hat:ansible_automation_platform_inside:2.4::el8
From an advisory covering 20 CVEs
 before 0:1.4.8-1.el8ap
0:1.4.8-1.el8ap
receptorctl
Red Hat:ansible_automation_platform_inside:2.4::el8
From an advisory covering 20 CVEs
 before 0:1.4.8-1.el8ap
0:1.4.8-1.el8ap
receptor
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:1.4.8-1.el8ap
0:1.4.8-1.el8ap
receptorctl
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:1.4.8-1.el8ap
0:1.4.8-1.el8ap
receptor
Red Hat:ansible_automation_platform_developer:2.4::el9
From an advisory covering 20 CVEs
 before 0:1.4.8-1.el9ap
0:1.4.8-1.el9ap
receptorctl
Red Hat:ansible_automation_platform_developer:2.4::el9
From an advisory covering 20 CVEs
 before 0:1.4.8-1.el9ap
0:1.4.8-1.el9ap
receptor
Red Hat:ansible_automation_platform_inside:2.4::el9
From an advisory covering 20 CVEs
 before 0:1.4.8-1.el9ap
0:1.4.8-1.el9ap
receptorctl
Red Hat:ansible_automation_platform_inside:2.4::el9
From an advisory covering 20 CVEs
 before 0:1.4.8-1.el9ap
0:1.4.8-1.el9ap
receptor
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:1.4.8-1.el9ap
0:1.4.8-1.el9ap
receptorctl
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:1.4.8-1.el9ap
0:1.4.8-1.el9ap
python39-cryptography
Red Hat:ansible_automation_platform_developer:2.4::el8
From an advisory covering 20 CVEs
 before 0:42.0.5-1.el8ap
0:42.0.5-1.el8ap
python39-cryptography-debuginfo
Red Hat:ansible_automation_platform_developer:2.4::el8
From an advisory covering 20 CVEs
 before 0:42.0.5-1.el8ap
0:42.0.5-1.el8ap
python3x-cryptography
Red Hat:ansible_automation_platform_developer:2.4::el8
From an advisory covering 20 CVEs
 before 0:42.0.5-1.el8ap
0:42.0.5-1.el8ap
python3x-cryptography-debugsource
Red Hat:ansible_automation_platform_developer:2.4::el8
From an advisory covering 20 CVEs
 before 0:42.0.5-1.el8ap
0:42.0.5-1.el8ap
python39-cryptography
Red Hat:ansible_automation_platform_inside:2.4::el8
From an advisory covering 20 CVEs
 before 0:42.0.5-1.el8ap
0:42.0.5-1.el8ap
python39-cryptography-debuginfo
Red Hat:ansible_automation_platform_inside:2.4::el8
From an advisory covering 20 CVEs
 before 0:42.0.5-1.el8ap
0:42.0.5-1.el8ap
python3x-cryptography
Red Hat:ansible_automation_platform_inside:2.4::el8
From an advisory covering 20 CVEs
 before 0:42.0.5-1.el8ap
0:42.0.5-1.el8ap
python3x-cryptography-debugsource
Red Hat:ansible_automation_platform_inside:2.4::el8
From an advisory covering 20 CVEs
 before 0:42.0.5-1.el8ap
0:42.0.5-1.el8ap
python39-cryptography
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:42.0.5-1.el8ap
0:42.0.5-1.el8ap
python39-cryptography-debuginfo
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:42.0.5-1.el8ap
0:42.0.5-1.el8ap
python3x-cryptography
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:42.0.5-1.el8ap
0:42.0.5-1.el8ap
python3x-cryptography-debugsource
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:42.0.5-1.el8ap
0:42.0.5-1.el8ap
python-cryptography
Red Hat:ansible_automation_platform_developer:2.4::el9
From an advisory covering 20 CVEs
 before 0:42.0.5-1.el9ap
0:42.0.5-1.el9ap
python-cryptography-debugsource
Red Hat:ansible_automation_platform_developer:2.4::el9
From an advisory covering 20 CVEs
 before 0:42.0.5-1.el9ap
0:42.0.5-1.el9ap
python3-cryptography
Red Hat:ansible_automation_platform_developer:2.4::el9
From an advisory covering 20 CVEs
 before 0:42.0.5-1.el9ap
0:42.0.5-1.el9ap
python3-cryptography-debuginfo
Red Hat:ansible_automation_platform_developer:2.4::el9
From an advisory covering 20 CVEs
 before 0:42.0.5-1.el9ap
0:42.0.5-1.el9ap
python-cryptography
Red Hat:ansible_automation_platform_inside:2.4::el9
From an advisory covering 20 CVEs
 before 0:42.0.5-1.el9ap
0:42.0.5-1.el9ap
python-cryptography-debugsource
Red Hat:ansible_automation_platform_inside:2.4::el9
From an advisory covering 20 CVEs
 before 0:42.0.5-1.el9ap
0:42.0.5-1.el9ap
python3-cryptography
Red Hat:ansible_automation_platform_inside:2.4::el9
From an advisory covering 20 CVEs
 before 0:42.0.5-1.el9ap
0:42.0.5-1.el9ap
python3-cryptography-debuginfo
Red Hat:ansible_automation_platform_inside:2.4::el9
From an advisory covering 20 CVEs
 before 0:42.0.5-1.el9ap
0:42.0.5-1.el9ap
python-cryptography
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:42.0.5-1.el9ap
0:42.0.5-1.el9ap
python-cryptography-debugsource
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:42.0.5-1.el9ap
0:42.0.5-1.el9ap
python3-cryptography
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:42.0.5-1.el9ap
0:42.0.5-1.el9ap
python3-cryptography-debuginfo
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:42.0.5-1.el9ap
0:42.0.5-1.el9ap
python39-pillow
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:10.3.0-1.el8ap
0:10.3.0-1.el8ap
python39-pillow-debuginfo
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:10.3.0-1.el8ap
0:10.3.0-1.el8ap
python3x-pillow
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:10.3.0-1.el8ap
0:10.3.0-1.el8ap
python3x-pillow-debugsource
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:10.3.0-1.el8ap
0:10.3.0-1.el8ap
python-pillow
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:10.3.0-1.el9ap
0:10.3.0-1.el9ap
python-pillow-debugsource
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:10.3.0-1.el9ap
0:10.3.0-1.el9ap
python3-pillow
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:10.3.0-1.el9ap
0:10.3.0-1.el9ap
python3-pillow-debuginfo
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:10.3.0-1.el9ap
0:10.3.0-1.el9ap
python39-gunicorn
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:22.0.0-1.el8ap
0:22.0.0-1.el8ap
python3x-gunicorn
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:22.0.0-1.el8ap
0:22.0.0-1.el8ap
python-gunicorn
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:22.0.0-1.el9ap
0:22.0.0-1.el9ap
python3-gunicorn
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:22.0.0-1.el9ap
0:22.0.0-1.el9ap
python39-idna
Red Hat:ansible_automation_platform_developer:2.4::el8
From an advisory covering 20 CVEs
 before 0:3.7-1.el8ap
0:3.7-1.el8ap
python3x-idna
Red Hat:ansible_automation_platform_developer:2.4::el8
From an advisory covering 20 CVEs
 before 0:3.7-1.el8ap
0:3.7-1.el8ap
python39-idna
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:3.7-1.el8ap
0:3.7-1.el8ap
python3x-idna
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:3.7-1.el8ap
0:3.7-1.el8ap
python-idna
Red Hat:ansible_automation_platform_developer:2.4::el9
From an advisory covering 20 CVEs
 before 0:3.7-1.el9ap
0:3.7-1.el9ap
python3-idna
Red Hat:ansible_automation_platform_developer:2.4::el9
From an advisory covering 20 CVEs
 before 0:3.7-1.el9ap
0:3.7-1.el9ap
python-idna
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:3.7-1.el9ap
0:3.7-1.el9ap
python3-idna
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:3.7-1.el9ap
0:3.7-1.el9ap
python39-pydantic
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:1.10.15-1.el8ap
0:1.10.15-1.el8ap
python3x-pydantic
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:1.10.15-1.el8ap
0:1.10.15-1.el8ap
python-pydantic
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:1.10.15-1.el9ap
0:1.10.15-1.el9ap
python3-pydantic
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:1.10.15-1.el9ap
0:1.10.15-1.el9ap
python39-sqlparse
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:0.5.0-1.el8ap
0:0.5.0-1.el8ap
python3x-sqlparse
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:0.5.0-1.el8ap
0:0.5.0-1.el8ap
python-sqlparse
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:0.5.0-1.el9ap
0:0.5.0-1.el9ap
python3-sqlparse
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:0.5.0-1.el9ap
0:0.5.0-1.el9ap
python39-black
Red Hat:ansible_automation_platform_developer:2.4::el8
From an advisory covering 20 CVEs
 before 0:22.8.0-2.el8ap
0:22.8.0-2.el8ap
python3x-black
Red Hat:ansible_automation_platform_developer:2.4::el8
From an advisory covering 20 CVEs
 before 0:22.8.0-2.el8ap
0:22.8.0-2.el8ap
python39-black
Red Hat:ansible_automation_platform_inside:2.4::el8
From an advisory covering 20 CVEs
 before 0:22.8.0-2.el8ap
0:22.8.0-2.el8ap
python3x-black
Red Hat:ansible_automation_platform_inside:2.4::el8
From an advisory covering 20 CVEs
 before 0:22.8.0-2.el8ap
0:22.8.0-2.el8ap
python39-black
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:22.8.0-2.el8ap
0:22.8.0-2.el8ap
python3x-black
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:22.8.0-2.el8ap
0:22.8.0-2.el8ap
python-black
Red Hat:ansible_automation_platform_developer:2.4::el9
From an advisory covering 20 CVEs
 before 0:22.8.0-2.el9ap
0:22.8.0-2.el9ap
python3-black
Red Hat:ansible_automation_platform_developer:2.4::el9
From an advisory covering 20 CVEs
 before 0:22.8.0-2.el9ap
0:22.8.0-2.el9ap
python-black
Red Hat:ansible_automation_platform_inside:2.4::el9
From an advisory covering 20 CVEs
 before 0:22.8.0-2.el9ap
0:22.8.0-2.el9ap
python3-black
Red Hat:ansible_automation_platform_inside:2.4::el9
From an advisory covering 20 CVEs
 before 0:22.8.0-2.el9ap
0:22.8.0-2.el9ap
python-black
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:22.8.0-2.el9ap
0:22.8.0-2.el9ap
python3-black
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:22.8.0-2.el9ap
0:22.8.0-2.el9ap
python39-aiohttp
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:3.9.5-1.el8ap
0:3.9.5-1.el8ap
python39-aiohttp-debuginfo
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:3.9.5-1.el8ap
0:3.9.5-1.el8ap
python3x-aiohttp
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:3.9.5-1.el8ap
0:3.9.5-1.el8ap
python3x-aiohttp-debugsource
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:3.9.5-1.el8ap
0:3.9.5-1.el8ap
python-aiohttp
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:3.9.5-1.el9ap
0:3.9.5-1.el9ap
python-aiohttp-debugsource
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:3.9.5-1.el9ap
0:3.9.5-1.el9ap
python3-aiohttp
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:3.9.5-1.el9ap
0:3.9.5-1.el9ap
python3-aiohttp-debuginfo
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:3.9.5-1.el9ap
0:3.9.5-1.el9ap
automation-hub
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:4.9.2-1.el8ap
0:4.9.2-1.el8ap
python39-galaxy-ng
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:4.9.2-1.el8ap
0:4.9.2-1.el8ap
python3x-galaxy-ng
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:4.9.2-1.el8ap
0:4.9.2-1.el8ap
automation-hub
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:4.9.2-1.el9ap
0:4.9.2-1.el9ap
python-galaxy-ng
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:4.9.2-1.el9ap
0:4.9.2-1.el9ap
python3-galaxy-ng
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:4.9.2-1.el9ap
0:4.9.2-1.el9ap
python39-social-auth-app-django
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:5.4.1-1.el8ap
0:5.4.1-1.el8ap
python3x-social-auth-app-django
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:5.4.1-1.el8ap
0:5.4.1-1.el8ap
python-social-auth-app-django
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:5.4.1-1.el9ap
0:5.4.1-1.el9ap
python3-social-auth-app-django
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:5.4.1-1.el9ap
0:5.4.1-1.el9ap
python39-jinja2
Red Hat:ansible_automation_platform_developer:2.4::el8
From an advisory covering 20 CVEs
 before 0:3.1.4-1.el8ap
0:3.1.4-1.el8ap
python3x-jinja2
Red Hat:ansible_automation_platform_developer:2.4::el8
From an advisory covering 20 CVEs
 before 0:3.1.4-1.el8ap
0:3.1.4-1.el8ap
python39-jinja2
Red Hat:ansible_automation_platform_inside:2.4::el8
From an advisory covering 20 CVEs
 before 0:3.1.4-1.el8ap
0:3.1.4-1.el8ap
python3x-jinja2
Red Hat:ansible_automation_platform_inside:2.4::el8
From an advisory covering 20 CVEs
 before 0:3.1.4-1.el8ap
0:3.1.4-1.el8ap
python39-jinja2
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:3.1.4-1.el8ap
0:3.1.4-1.el8ap
python3x-jinja2
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:3.1.4-1.el8ap
0:3.1.4-1.el8ap
python-jinja2
Red Hat:ansible_automation_platform_developer:2.4::el9
From an advisory covering 20 CVEs
 before 0:3.1.4-1.el9ap
0:3.1.4-1.el9ap
python3-jinja2
Red Hat:ansible_automation_platform_developer:2.4::el9
From an advisory covering 20 CVEs
 before 0:3.1.4-1.el9ap
0:3.1.4-1.el9ap
python-jinja2
Red Hat:ansible_automation_platform_inside:2.4::el9
From an advisory covering 20 CVEs
 before 0:3.1.4-1.el9ap
0:3.1.4-1.el9ap
python3-jinja2
Red Hat:ansible_automation_platform_inside:2.4::el9
From an advisory covering 20 CVEs
 before 0:3.1.4-1.el9ap
0:3.1.4-1.el9ap
python-jinja2
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:3.1.4-1.el9ap
0:3.1.4-1.el9ap
python3-jinja2
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:3.1.4-1.el9ap
0:3.1.4-1.el9ap
python39-requests
Red Hat:ansible_automation_platform_developer:2.4::el8
From an advisory covering 20 CVEs
 before 0:2.32.2-1.el8ap
0:2.32.2-1.el8ap
python3x-requests
Red Hat:ansible_automation_platform_developer:2.4::el8
From an advisory covering 20 CVEs
 before 0:2.32.2-1.el8ap
0:2.32.2-1.el8ap
python39-requests
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:2.32.2-1.el8ap
0:2.32.2-1.el8ap
python3x-requests
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 20 CVEs
 before 0:2.32.2-1.el8ap
0:2.32.2-1.el8ap
python-requests
Red Hat:ansible_automation_platform_developer:2.4::el9
From an advisory covering 20 CVEs
 before 0:2.32.2-1.el9ap
0:2.32.2-1.el9ap
python3-requests
Red Hat:ansible_automation_platform_developer:2.4::el9
From an advisory covering 20 CVEs
 before 0:2.32.2-1.el9ap
0:2.32.2-1.el9ap
python-requests
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:2.32.2-1.el9ap
0:2.32.2-1.el9ap
python3-requests
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 20 CVEs
 before 0:2.32.2-1.el9ap
0:2.32.2-1.el9ap
python-gunicorn
Red Hat:openstack:16.2::el8
 before 0:19.9.0-11.el8ost
0:19.9.0-11.el8ost
python3-gunicorn
Red Hat:openstack:16.2::el8
 before 0:19.9.0-11.el8ost
0:19.9.0-11.el8ost
python-gunicorn
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 4 CVEs
 before 0:22.0.0-1.el8pc
0:22.0.0-1.el8pc
python3.11-gunicorn
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 4 CVEs
 before 0:22.0.0-1.el8pc
0:22.0.0-1.el8pc
python-gunicorn
Red Hat:satellite:6.15::el8
From an advisory covering 4 CVEs
 before 0:22.0.0-1.el8pc
0:22.0.0-1.el8pc
python3.11-gunicorn
Red Hat:satellite:6.15::el8
From an advisory covering 4 CVEs
 before 0:22.0.0-1.el8pc
0:22.0.0-1.el8pc
yggdrasil-worker-forwarder
Red Hat:satellite:6.15::el8
From an advisory covering 4 CVEs
 before 0:0.0.3-2.el8sat
0:0.0.3-2.el8sat
python-cryptography
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 4 CVEs
 before 0:42.0.8-1.el8pc
0:42.0.8-1.el8pc
python-cryptography-debugsource
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 4 CVEs
 before 0:42.0.8-1.el8pc
0:42.0.8-1.el8pc
python3.11-cryptography
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 4 CVEs
 before 0:42.0.8-1.el8pc
0:42.0.8-1.el8pc
python3.11-cryptography-debuginfo
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 4 CVEs
 before 0:42.0.8-1.el8pc
0:42.0.8-1.el8pc
python-cryptography
Red Hat:satellite:6.15::el8
From an advisory covering 4 CVEs
 before 0:42.0.8-1.el8pc
0:42.0.8-1.el8pc
python-cryptography-debugsource
Red Hat:satellite:6.15::el8
From an advisory covering 4 CVEs
 before 0:42.0.8-1.el8pc
0:42.0.8-1.el8pc
python3.11-cryptography
Red Hat:satellite:6.15::el8
From an advisory covering 4 CVEs
 before 0:42.0.8-1.el8pc
0:42.0.8-1.el8pc
python3.11-cryptography-debuginfo
Red Hat:satellite:6.15::el8
From an advisory covering 4 CVEs
 before 0:42.0.8-1.el8pc
0:42.0.8-1.el8pc
rubygem-foreman_theme_satellite
Red Hat:satellite:6.15::el8
From an advisory covering 4 CVEs
 before 0:13.3.0-0.1.el8sat
0:13.3.0-0.1.el8sat
python-django
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 4 CVEs
 before 0:4.2.15-1.el8pc
0:4.2.15-1.el8pc
python3.11-django
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 4 CVEs
 before 0:4.2.15-1.el8pc
0:4.2.15-1.el8pc
python-django
Red Hat:satellite:6.15::el8
From an advisory covering 4 CVEs
 before 0:4.2.15-1.el8pc
0:4.2.15-1.el8pc
python3.11-django
Red Hat:satellite:6.15::el8
From an advisory covering 4 CVEs
 before 0:4.2.15-1.el8pc
0:4.2.15-1.el8pc
python-gunicorn
Red Hat:rhui:4::el8
From an advisory covering 13 CVEs
 before 0:22.0.0-1.0.1.el8ui
0:22.0.0-1.0.1.el8ui
python3.11-gunicorn
Red Hat:rhui:4::el8
From an advisory covering 13 CVEs
 before 0:22.0.0-1.0.1.el8ui
0:22.0.0-1.0.1.el8ui
python-sqlparse
Red Hat:rhui:4::el8
From an advisory covering 13 CVEs
 before 0:0.5.0-1.el8ui
0:0.5.0-1.el8ui
python3.11-sqlparse
Red Hat:rhui:4::el8
From an advisory covering 13 CVEs
 before 0:0.5.0-1.el8ui
0:0.5.0-1.el8ui
python-grpcio
Red Hat:rhui:4::el8
From an advisory covering 13 CVEs
 before 0:1.65.4-1.el8ui
0:1.65.4-1.el8ui
python-grpcio-debugsource
Red Hat:rhui:4::el8
From an advisory covering 13 CVEs
 before 0:1.65.4-1.el8ui
0:1.65.4-1.el8ui
python3.11-grpcio
Red Hat:rhui:4::el8
From an advisory covering 13 CVEs
 before 0:1.65.4-1.el8ui
0:1.65.4-1.el8ui
python3.11-grpcio-debuginfo
Red Hat:rhui:4::el8
From an advisory covering 13 CVEs
 before 0:1.65.4-1.el8ui
0:1.65.4-1.el8ui
python-cryptography
Red Hat:rhui:4::el8
From an advisory covering 13 CVEs
 before 0:42.0.8-1.el8ui
0:42.0.8-1.el8ui
python-cryptography-debugsource
Red Hat:rhui:4::el8
From an advisory covering 13 CVEs
 before 0:42.0.8-1.el8ui
0:42.0.8-1.el8ui
python3.11-cryptography
Red Hat:rhui:4::el8
From an advisory covering 13 CVEs
 before 0:42.0.8-1.el8ui
0:42.0.8-1.el8ui
python3.11-cryptography-debuginfo
Red Hat:rhui:4::el8
From an advisory covering 13 CVEs
 before 0:42.0.8-1.el8ui
0:42.0.8-1.el8ui
python-aiohttp
Red Hat:rhui:4::el8
From an advisory covering 13 CVEs
 before 0:3.9.4-1.el8ui
0:3.9.4-1.el8ui
python-aiohttp-debugsource
Red Hat:rhui:4::el8
From an advisory covering 13 CVEs
 before 0:3.9.4-1.el8ui
0:3.9.4-1.el8ui
python3.11-aiohttp
Red Hat:rhui:4::el8
From an advisory covering 13 CVEs
 before 0:3.9.4-1.el8ui
0:3.9.4-1.el8ui
python3.11-aiohttp-debuginfo
Red Hat:rhui:4::el8
From an advisory covering 13 CVEs
 before 0:3.9.4-1.el8ui
0:3.9.4-1.el8ui
python-jinja2
Red Hat:rhui:4::el8
From an advisory covering 13 CVEs
 before 0:3.1.4-1.el8ui
0:3.1.4-1.el8ui
python3.11-jinja2
Red Hat:rhui:4::el8
From an advisory covering 13 CVEs
 before 0:3.1.4-1.el8ui
0:3.1.4-1.el8ui
python-requests
Red Hat:rhui:4::el8
From an advisory covering 13 CVEs
 before 0:2.32.3-2.el8ui
0:2.32.3-2.el8ui
python3.11-requests
Red Hat:rhui:4::el8
From an advisory covering 13 CVEs
 before 0:2.32.3-2.el8ui
0:2.32.3-2.el8ui
python-django
Red Hat:rhui:4::el8
From an advisory covering 13 CVEs
 before 0:4.2.15-1.el8ui
0:4.2.15-1.el8ui
python3.11-django
Red Hat:rhui:4::el8
From an advisory covering 13 CVEs
 before 0:4.2.15-1.el8ui
0:4.2.15-1.el8ui
rootio-gunicorn
Root:PyPI
 before 21.2.0+root.io.1
21.2.0+root.io.120.1.0+root.io.120.1.0+root.io.221.2.0+root.io.2
gunicorn
Root:PyPI
 before 20.1.0+aikido.2
20.1.0+aikido.221.2.0+aikido.2
python-gunicorn
SUSE:Linux Enterprise Module for Python 3 15 SP5
 before 20.1.0-150400.12.6.1
20.1.0-150400.12.6.1
python-gunicorn
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 20.1.0-150400.12.6.1
20.1.0-150400.12.6.1
python-gunicorn
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 20.1.0-150400.12.6.1
20.1.0-150400.12.6.1
python-gunicorn
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 20.1.0-150400.12.6.1
20.1.0-150400.12.6.1
python-gunicorn
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 20.1.0-150400.12.6.1
20.1.0-150400.12.6.1
python-gunicorn
openSUSE:Leap 15.5
 before 20.1.0-150400.12.6.1
20.1.0-150400.12.6.1
python-gunicorn
SUSE:Linux Enterprise Module for Public Cloud 15 SP2
 before 19.7.1-150000.3.7.1
19.7.1-150000.3.7.1
python-gunicorn
SUSE:Linux Enterprise Module for Public Cloud 15 SP3
 before 19.7.1-150000.3.7.1
19.7.1-150000.3.7.1
python-gunicorn
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
 before 19.7.1-150000.3.7.1
19.7.1-150000.3.7.1
python-gunicorn
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
 before 19.7.1-150000.3.7.1
19.7.1-150000.3.7.1
python-gunicorn
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
 before 19.7.1-150000.3.7.1
19.7.1-150000.3.7.1
python-gunicorn
openSUSE:Leap 15.5
 before 19.7.1-150000.3.7.1
19.7.1-150000.3.7.1
gunicorn
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
17.5-217.5-2build117.5-2ubuntu0.1~esm1
 None known
gunicorn
Ubuntu:16.04:LTS
 All versions, plus listed versions
19.0-8ubuntu119.4.1-1ubuntu119.4.5-1ubuntu119.4.5-1ubuntu1.1
 None known
gunicorn
Ubuntu:18.04:LTS
 All versions, plus listed versions
19.7.1-319.7.1-4
 None known
gunicorn
Ubuntu:20.04:LTS
 All versions, plus listed versions
19.9.0-119.9.0-420.0.0-120.0.2-120.0.4-120.0.4-220.0.4-3
 None known
gunicorn
Ubuntu:22.04:LTS
 All versions, plus listed versions
20.1.0-120.1.0-2
 None known
gunicorn
Ubuntu:24.04:LTS
 All versions, plus listed versions
20.1.0-620.1.0-6ubuntu0.1
 None known
gunicorn
Ubuntu:25.10
 All versions, plus listed versions
23.0.0-1
 None known
gunicorn
Ubuntu:26.10
 All versions, plus listed versions
25.1.0-125.3.0-225.3.0-325.3.0-4
 None known
gunicorn
Ubuntu:26.04:LTS
 All versions, plus listed versions
23.0.0-123.0.0-1build125.0.3-225.1.0-1
 None known

History

History
RecordedChangedSources
affected, facts
aliases, publishedEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-1135 is a high vulnerability (CVSS 7.5) in Benoitc Benoitc/gunicorn, published April 16, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.00%, the 87th percentile. Fixed in gunicorn 22.0.0.

References

Show 183 moreShow less
This page doesn't list everything

Left out here: 35 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open